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In recent years, trust negotiation has been proposed as a novel authorization 
solution for use in open-system environments, in which resources are shared 
across organizational boundaries. Researchers have shown that trust negotiation 
is indeed a viable ... 
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A key obstacle to the widespread use of distributed object oriented systems is 
the lack of scalable access control mechanisms. It is often necessary to control 
access to individual objects and methods. In large systems, however, these can 
be so numerous ... 
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This document describes a protocol for carrying authentication, authorization, 
and configuration information between a Network Access Server which desires to 
authenticate its links and a shared Authentication Server. 
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Secure email has struggled with signifcant obstacles to adoption, among them 
the low usability of encryption software and the cost and overhead of obtaining 
public key certificates. Key continuity management (KGM) has been proposed as 
a way to lower ... 
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This document describes an application layer client-server protocol for the 
provisioning and management of objects stored in a shared central repository. 
Specified in XML, the protocol defines generic object management operations and 
an extensible framework ... 
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Traditional operating system interfaces and network protocol implementations 
force some system state to be kept on both sides of a connection. This state ties 
the connection to its endpoints, impedes transparent failover, permits denial-of- 
service attacks, ... 
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Recent advances in wireless data networking and portable information appliances 
have engendered a new paradigm of computing, called mobile computing, in 
which users carrying portable devices have access to data and information 
services ... 
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We propose two new mechanisms for caching handshake information on TLS 
clients. The "fast-track" mechanism provides a client-side cache of a server's 
public parameters and negotiated parameters in the course of an initial, enabling 
handshake. These parameters ... 
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This document gives an overview and specification of Version 5 of the protocol 
for the Kerberos network authentication system. Version 4, described elsewhere 
[1,2], is presently in production use at MIT's Project Athena, and at other 
Internet sites. 
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Specifications are in progress for changes to the sockets API to support IP 
version 6 [ RFG-21 33] . These changes are for TCP and UDP- based applications 
and will support most end-user applications in use today: Telnet and FTP clients 
and servers, HTTP ... 


Apnl 1997 X.500 Implementations Gatalog-96 

Publisher: RFC Editor 

Full text available: i"^TYt (243 99 iix 

r*!]----- ^^^^-^^ Additional Information: tuli citation, abstiaci 

KB) 

Bibliometrics: Downloads (6 Weeks): 2, Downloads (12 Months): 8, Citation Count: 0 


This document is a revision to [RFC 1 632] : A Revised Catalog of Available X.500 
Implementations and is based on the results of data collection via a WWW home 
page that enabled implementors to submit new or updated descriptions of 
currently available ... 
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The protocol described in this document is designed to provide access to 
directories supporting the X.500 models, while not incurring the resource 
requirements of the X.500 Directory Access Protocol (DAP). This protocol is 
specifically targeted at management ... 
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We describe a sequence of five experiments on network security that cast 
students successively in the roles of computer user, programmer, and system 
administrator. Unlike experiments described in several previous papers, these 
experiments avoid placing ... 
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Enterprises are rapidly extending their relatively stable and internally-oriented 
business processes and applications with loosely-coupled enterprise software 
services in order to support highly dynamic, cross-organizational business 
processes. These ,,, 
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This document standardizes five new media types -- text/xml, application/xm I, 
text/xml-external-parsed-entity, application/xm I- external-parsed-entity, and 
application/xml-dtd -- for use in exchanging network entities that are related to 
the Extensible ... 
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This Glossary (191 pages of definitions and 13 pages of references) provides 
abbreviations, explanations, and recommendations for use of information system 
security terminology. The intent is to improve the comprehensibility of writing 
that deals with ... 


April NetworK Fiie System (NFS) version 4 Protocol 
2003 

Publisher: RFC Editor 

Full text available: [J^TYt (600 99 a^^-*- ii < * ■ ■ . . ■■ 

i-^j],----^ Additional Information ■ ro i o wv^x 

KB) 

Bibliometrics: Downloads (6 Weeks): 0, Downloads (12 Months): 15, Citation Count: I 


The Network File System (NFS) version 4 is a distributed filesystem protocol 
which owes heritage to NFS protocol version 2, RFC 1094, and version 3, RFC 
1813. Unlike earlier versions, the NFS version 4 protocol supports traditional file 
access while ... 
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Securing access to files is an important and growing concern in corporate 
environments. Employees are increasingly accessing files from untrusted devices, 
including personal home computers and mobile devices, such as smart phones, 
which are not under ... 
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We have implemented and deployed an access control mechanism that uses 
digitally-signed certificates to define and enforce an access policy for a set of 
distributed resources that have multiple, independent and geographically 
dispersed stakeholders. ... 
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